← Back to ToExcel

Privacy Policy

Last updated: May 25, 2026

What We Collect

When you use ToExcel, we temporarily process the files you upload (images and PDFs) to convert them into Excel spreadsheets. That's the core of what we do, and we keep data handling to a minimum.

We collect:

• Uploaded files — processed in memory and automatically deleted immediately after conversion is complete
• IP addresses — used solely for rate limiting and abuse prevention, not for tracking or profiling
• Basic usage metrics — number of files converted per day, used to manage server load

What We Don't Collect

• No personal information (name, email, phone)
• No account credentials — we don't have accounts
• No payment information — the service is free
• No tracking cookies or advertising identifiers
• No browsing history across other websites

How Long We Keep Your Data

Uploaded files are deleted immediately after processing. We don't store them, back them up, or keep any copies. Once your conversion is done and you've downloaded the result, the file is gone from our servers.

IP address logs are retained for up to 30 days for rate limiting purposes, then automatically purged.

File Security

All file transfers are encrypted using TLS (HTTPS). Files are processed in memory and are never written to persistent storage. No human ever sees or reviews your uploaded documents.

Cookies

We use a single persistent cookie (login) that stores encrypted session information (a timestamp and anonymized identifier) to manage your conversion session. This cookie lasts for 30 days and is essential for the service to function. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

Third-Party Services

We use Cloudflare Turnstile for bot detection during high-traffic periods. Turnstile may collect minimal device information to verify you're a real user. See Cloudflare's Privacy Policy.

Your Rights (GDPR / CCPA)

If you're in the European Union or California, you have the right to:

• Access — know what data we process about you
• Rectification — correct any inaccurate data we hold
• Erasure — request deletion of any data we may hold
• Restriction — limit how we process your data
• Data portability — receive your data in a structured format
• Object — object to processing of your data
• Withdraw consent — withdraw consent at any time where processing is based on consent
• Lodge a complaint — contact a supervisory authority

Since we delete files immediately after processing and don't store personal information, most of these rights are already fulfilled by default. If you have questions, contact us at [email protected].

Data Controller

The data controller for ToExcel is the website operator. For any data protection inquiries, contact [email protected].

International Data Transfers

Our servers are located in the United States. If you access the service from the European Economic Area (EEA), your data may be transferred to the US. We use Cloudflare, which provides EU-US Data Privacy Framework coverage. Files are processed and deleted immediately and are not stored on a persistent basis.

Legal Basis for Processing

• Legitimate interest — IP-based rate limiting to prevent abuse and ensure service availability
• Contract performance — processing uploaded files to deliver the conversion service you requested
• Consent — Cloudflare Turnstile bot verification (only when triggered)

Children's Privacy

ToExcel is not directed at children under 16 (or 13 where local law permits). We don't knowingly collect information from children.

Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page with an updated date.

Contact

Questions about this privacy policy? Reach us at [email protected]. See also our Terms of Service.